Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/658d48a9-b317-48f7-a9b3-0c9a08640274/1c4f6eff4c13e3627933f24b5f045e36929cf2f1.roa
File:                     1c4f6eff4c13e3627933f24b5f045e36929cf2f1.roa (raw, json)
Hash identifier:          Z06/t1pAPs8axkymnL+1a65InWA5EO7CPl6bQtCoyWk=
Subject key identifier:   30:D1:51:4D:AB:33:90:33:34:81:C6:B5:91:96:69:8E:F4:23:1A:43
Certificate issuer:       /CN=1c011c49ef045ef0e106ad87280aa70643378a03
Certificate serial:       1594C0
Authority key identifier: 75:6E:BB:B0:D4:5F:C5:C4:8A:C5:67:CC:FF:7D:CD:EA:94:F2:3B:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c011c49ef045ef0e106ad87280aa70643378a03.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/658d48a9-b317-48f7-a9b3-0c9a08640274/1c4f6eff4c13e3627933f24b5f045e36929cf2f1.roa
Signing time:             Thu 23 Feb 2023 15:17:19 +0000
ROA not before:           Wed 22 Feb 2023 15:16:19 +0000
ROA not after:            Sun 23 Feb 2025 15:16:19 +0000
asID:                     270035
IP address blocks:        190.151.142.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1414336 (0x1594c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c011c49ef045ef0e106ad87280aa70643378a03
        Validity
            Not Before: Feb 22 15:16:19 2023 GMT
            Not After : Feb 23 15:16:19 2025 GMT
        Subject: CN=1c4f6eff4c13e3627933f24b5f045e36929cf2f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:31:93:74:03:a2:f9:c6:14:16:b2:6d:cb:d0:
                    f9:8c:ae:3d:2c:3d:ad:bb:e5:7c:15:fd:44:eb:06:
                    83:ec:1b:80:3e:b2:47:85:26:fd:19:b8:46:bb:ee:
                    27:f1:17:4e:27:66:84:91:2c:62:d3:dc:72:b4:0b:
                    8f:50:de:7f:e9:fb:c8:93:cc:b6:f0:20:67:5a:a0:
                    c5:5d:9d:ad:86:a1:14:61:d3:e3:1b:09:2f:07:de:
                    51:83:d9:d0:49:4f:92:b8:67:2b:77:10:38:ba:ea:
                    26:a0:22:66:61:ae:b3:ab:4e:c1:79:2f:e9:8c:32:
                    66:b9:8a:f1:47:57:5f:67:07:a9:64:4b:5c:b6:e8:
                    2d:24:97:d3:b8:0b:99:1f:62:52:c7:0a:da:54:8b:
                    26:0a:5e:c9:b2:e1:b5:73:65:ec:92:15:a0:cf:b4:
                    e1:e0:2f:14:f2:01:bc:8a:25:06:63:85:7b:4e:44:
                    2b:34:9d:56:74:c5:94:92:bd:34:10:dc:f9:41:42:
                    3c:6b:b8:fd:7d:66:9f:89:3c:00:71:07:96:ac:1c:
                    54:19:ee:6c:6b:45:53:af:90:bf:f3:da:c6:0e:d9:
                    d6:52:7f:a4:56:f6:f9:7a:f8:e5:c2:fb:72:e3:ad:
                    ca:e0:f4:b7:97:c1:01:3c:83:5f:b4:b2:83:6e:a0:
                    77:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:D1:51:4D:AB:33:90:33:34:81:C6:B5:91:96:69:8E:F4:23:1A:43
            X509v3 Authority Key Identifier:
                keyid:75:6E:BB:B0:D4:5F:C5:C4:8A:C5:67:CC:FF:7D:CD:EA:94:F2:3B:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c011c49ef045ef0e106ad87280aa70643378a03.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/658d48a9-b317-48f7-a9b3-0c9a08640274/1c4f6eff4c13e3627933f24b5f045e36929cf2f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/658d48a9-b317-48f7-a9b3-0c9a08640274/1c011c49ef045ef0e106ad87280aa70643378a03.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.151.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:fe:8d:02:d5:56:1a:1a:b9:e2:ae:aa:f8:7c:4a:90:dc:95:
         af:1a:47:f3:ce:d5:fa:be:4e:82:c6:67:c2:b6:9a:c8:6c:a5:
         10:cd:8f:cf:b2:e2:73:4c:8f:af:a8:3c:27:ff:ac:ef:67:0a:
         14:5f:3e:f9:32:29:02:b3:28:b6:d0:b6:3c:ef:e6:51:90:82:
         0b:4e:b4:26:be:e0:44:6e:57:94:bc:a4:00:48:13:67:53:39:
         b9:84:7a:29:d6:e6:06:8f:41:40:7e:5a:29:70:ac:e6:86:76:
         b4:d5:7a:57:68:4e:4e:75:a5:ad:a5:19:c0:24:d9:4e:13:47:
         2f:e9:28:67:73:11:51:a3:1a:e8:16:f6:09:76:0c:2b:1e:e9:
         71:a2:ee:5e:d8:ed:cb:f8:79:e3:95:39:8d:ad:a1:b5:c0:7d:
         8a:59:e3:93:41:8a:01:bb:11:1e:60:36:7d:ad:ec:dc:28:a8:
         43:16:32:c0:b1:d6:ca:7e:53:38:24:a2:42:08:ab:83:7a:8c:
         09:da:a1:20:4e:b9:62:58:4e:db:0d:cd:52:44:f9:6a:cb:fc:
         94:71:5d:3d:b2:38:df:a5:d8:f4:ad:8e:f9:62:46:f9:1f:0e:
         ab:be:55:d9:d2:1c:6a:58:8b:7e:8f:61:95:7a:5c:34:f0:67:
         0a:13:c2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----